Sigurnost kod AJAX-a?Da li vidljivost javascript koda tj. ajax-a moze da ugrozi bezbednost sajta?
S ozbzirom da je javascript fajl dostupan javno, i elementi primera textbox su vidljivi, da li moze to da se zloupotrebi? Takodje, da li postoji nacin da se sakrije/zastiti nesto?
Evo kod. Ocigledno se vidi koje promenjive prenose podatke iz elemenata...
Code:
function newModel(op, vid, id) { //list all
rnd = Math.floor(Math.random()*99);
newModel = document.getElementById('txtNewModel').value;
modelvisible = document.getElementById('modelvis').value;
http.open('POST', 'modeli/modeli.php');
var params2 = 'op='+op+'&vid='+vid+'&id='+id+'&modelvisible='+modelvisible+'&newmodel='+newModel+'&random='+rnd;
http.setRequestHeader("Content-type","application/x-www-form-urlencoded")
http.setRequestHeader("Content-length", params2.length);
http.setRequestHeader("Connection", "close");
http.onreadystatechange = function(){
if(http.readyState == 4){
document.getElementById('models').innerHTML = http.responseText;
}
}
http.send(params2);
}
function newModel(op, vid, id) { //list all
rnd = Math.floor(Math.random()*99);
newModel = document.getElementById('txtNewModel').value;
modelvisible = document.getElementById('modelvis').value;
http.open('POST', 'modeli/modeli.php');
var params2 = 'op='+op+'&vid='+vid+'&id='+id+'&modelvisible='+modelvisible+'&newmodel='+newModel+'&random='+rnd;
http.setRequestHeader("Content-type","application/x-www-form-urlencoded")
http.setRequestHeader("Content-length", params2.length);
http.setRequestHeader("Connection", "close");
http.onreadystatechange = function(){
if(http.readyState == 4){
document.getElementById('models').innerHTML = http.responseText;
}
}
http.send(params2);
}
Hvala
